Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: QzyZptTGzlGUb8e7ap7hlLJIao0INzj9eFLnfcbvIeY=
Subject key identifier: 2F:A5:0E:B6:EF:12:8A:B1:1B:26:27:8D:0B:38:A9:90:37:C9:34:B6
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01A0005C78EBB045C2161C2CC73B7F829EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0B1B
Signing time: Fri 14 Aug 2026 13:00:55 +0000
Manifest this update: Fri 14 Aug 2026 13:00:55 +0000
Manifest next update: Sat 15 Aug 2026 13:00:55 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: y75CWphj0gyl4N1nwZUH4U/iM6qwSyHRXadr7JHNqRM=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:78:eb:b0:45:c2:16:1c:2c:c7:3b:7f:82:9e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Aug 14 13:00:55 2026 GMT
Not After : Aug 15 13:00:55 2026 GMT
Subject: CN=2fa50eb6ef128ab11b26278d0b38a99037c934b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:17:7d:78:ef:aa:1b:32:00:a9:14:0e:be:
1f:1a:69:ad:64:4b:10:ef:01:d5:a8:00:4c:ff:15:
cf:b2:17:57:52:c2:68:10:21:e2:64:b8:fe:80:eb:
71:90:74:05:ef:3b:b0:df:bb:71:f1:bd:19:c8:ad:
1f:60:51:5d:ec:e0:b9:c0:c4:85:ec:4a:c6:ce:96:
7a:24:c8:e8:03:ab:09:58:d1:b4:0d:7c:0a:c1:bd:
58:23:93:1b:de:2c:ba:7f:b2:bd:2b:ba:c8:eb:15:
4f:fd:67:af:55:d2:e2:77:26:e3:d7:fe:7b:5c:e9:
18:57:38:b1:a5:41:ce:c9:72:11:bf:8d:28:6e:90:
67:17:7f:39:93:bf:a3:e6:48:58:82:fa:76:a6:5a:
ea:8c:86:ac:16:2e:41:0e:76:2d:2b:a6:78:96:b3:
14:2c:e4:24:a2:5b:45:86:9c:3b:07:46:3f:02:e7:
04:80:75:ce:2d:a0:2a:1b:cd:06:01:57:bf:fe:65:
58:c7:65:d6:10:44:4c:a8:d3:08:8b:a3:68:42:96:
df:24:47:23:6f:ad:4b:b4:b5:12:3e:d9:ec:1c:ec:
f0:67:de:7a:07:d0:4a:57:70:2a:88:c0:5f:df:9f:
da:6d:f7:fa:87:fd:d7:85:29:c3:59:25:bc:8a:41:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:0E:B6:EF:12:8A:B1:1B:26:27:8D:0B:38:A9:90:37:C9:34:B6
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:22:15:16:62:89:d5:b2:3c:68:20:06:ae:8d:15:09:16:80:
65:79:6a:c5:17:db:d0:69:87:0c:03:93:64:ff:81:11:f9:40:
3f:4b:9a:50:73:47:49:21:67:72:22:47:9a:1e:74:e9:7f:56:
d8:4c:3c:0c:23:b9:45:94:a9:d9:f6:d5:5f:f2:96:0e:a1:9c:
99:2f:96:36:b3:25:51:22:b1:3a:36:e9:c5:06:82:2e:7d:ec:
e9:a0:97:b3:7e:a0:cd:54:65:df:24:fa:f7:17:6b:d5:28:92:
a7:5f:80:11:89:da:cc:e0:42:73:79:48:54:b5:ec:9f:0c:0a:
02:72:4f:8b:42:db:f3:71:09:1d:4b:a8:93:8f:8c:76:46:2d:
97:ce:db:fe:2e:c7:07:0e:3d:41:e3:6a:4b:2c:af:00:1a:23:
78:2b:2b:7a:12:c3:88:32:b6:96:55:ab:58:26:11:7b:12:d1:
e0:db:68:7d:a2:ae:62:07:2d:47:df:7d:3d:51:b1:2a:91:eb:
d2:95:eb:13:1b:8c:8e:84:93:56:b5:be:06:a6:d8:f1:29:95:
1b:b9:0d:cc:c4:42:16:a4:5e:f8:74:65:79:f0:fc:bb:ed:5b:
ee:d6:17:29:a3:01:f7:80:1d:6f:62:b5:9b:8b:77:3c:93:4e:
bb:f9:50:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXHjrsEXCFhwsxzt/gp7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjIzNTdhNDFmNGU1OTBiYTYyZTc3MWQyMDU0ZTAwOGUw
ZWQ5MWUwHhcNMjYwODE0MTMwMDU1WhcNMjYwODE1MTMwMDU1WjAzMTEwLwYDVQQD
EygyZmE1MGViNmVmMTI4YWIxMWIyNjI3OGQwYjM4YTk5MDM3YzkzNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/EXfXjvqhsyAKkUDr4fGmmtZEsQ
7wHVqABM/xXPshdXUsJoECHiZLj+gOtxkHQF7zuw37tx8b0ZyK0fYFFd7OC5wMSF
7ErGzpZ6JMjoA6sJWNG0DXwKwb1YI5Mb3iy6f7K9K7rI6xVP/WevVdLidybj1/57
XOkYVzixpUHOyXIRv40obpBnF385k7+j5khYgvp2plrqjIasFi5BDnYtK6Z4lrMU
LOQkoltFhpw7B0Y/AucEgHXOLaAqG80GAVe//mVYx2XWEERMqNMIi6NoQpbfJEcj
b61LtLUSPtnsHOzwZ956B9BKV3AqiMBf35/abff6h/3XhSnDWSW8ikFXoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+lDrbvEoqxGyYnjQs4qZA3yTS2MB8GA1UdIwQY
MBaAFADyNXpB9OWQumLncdIFTgCODtkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjIt
NWUwZmE5NGJjMzcwLzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjItNWUwZmE5NGJjMzcw
LzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiIVFmKJ
1bI8aCAGro0VCRaAZXlqxRfb0GmHDAOTZP+BEflAP0uaUHNHSSFnciJHmh506X9W
2Ew8DCO5RZSp2fbVX/KWDqGcmS+WNrMlUSKxOjbpxQaCLn3s6aCXs36gzVRl3yT6
9xdr1SiSp1+AEYnazOBCc3lIVLXsnwwKAnJPi0Lb83EJHUuok4+MdkYtl87b/i7H
Bw49QeNqSyyvABojeCsrehLDiDK2llWrWCYRexLR4NtofaKuYgctR999PVGxKpHr
0pXrExuMjoSTVrW+BqbY8SmVG7kNzMRCFqRe+HRlefD8u+1b7tYXKaMB94Adb2K1
m4t3PJNOu/lQrA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:09:21 2026 by rpki-client